Description
In Gogs 0.11.91, MakeEmailPrimary in models/user_mail.go lacks a "not the owner of the email" check.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | gogs.io/gogs | < 0.12.0 | 0.12.0 | GHSA-4c7m-vv47-7c69 |
Medium · 5.3
CVE-2020-14958
EUVD-2021-0934GHSA-4c7m-vv47-7c69GO-2022-0788
Insecure Permissions in Gogs
Published Jun 21, 2020 · Updated Aug 4, 2024 · Assigned by mitre